3 ms·

I don't see how you'd be owned if you're denying all outside traffic, but stranger things have happened. They don't all come with it configured this way by def

I don't see how you'd be owned if you're denying all outside traffic, but stranger things have happened. They don't all come with it configured this way by default, and it's definitely something to be aware of. The hAP AC^2, for example, has a button that rotates through 3 default configs. One of those configs is NAT home router/firewall, one of them is just router, and one of them is completely empty. At least, that's how I remember it working.

somehnguy 5y ago
> I don't see how you'd be owned if you're denying all outside traffic, but stranger things have happened. My thought was the same but yup you never know. From the outside my attack surface is very low, just a couple port forwards to a VPN/SSH server. It’s the non-obvious exploits that worry me (overflow in packet header parsing or borderline magic like that), but perhaps I’ve been watching too many movies :) I will make sure my config is as solid as I can reasonably make it before connecting it to the world, I guess outside of that there’s not a whole lot I can do anyway.